Skip to content

3.123.2

Latest

Choose a tag to compare

@github-actions github-actions released this 05 Nov 15:11
· 17 commits to main since this release

3.123.2 (2026-11-05)

Note

Official changes are available on Pulp docs

REST API

Bugfixes

  • Fixed uploads of files whose names start with artifact when the media root is empty.
    #8041
  • Insures that Content-Disposition, Content-Security-Policy, and X-Content-Type-Options
    are set consistently in the content-app. This addresses CVE-2026-84232.

Plugin API

Bugfixes

  • Pulp's gpg_verify() function now respects the system policy for the sequoia crypto library in /etc/crypto-policies/back-ends/sequoia.config (or the path set by the environment variable SEQUOIA_CRYPTO_POLICY).

Pulp File

No significant changes.

Pulp Cert Guard

No significant changes.